![](\"https:\/\/media.wired.com\/photos\/62ab7b8571686457a5be76fb\/master\/pass\/Robocalls-Security-GettyImages-164945796.jpg\"\/)
<\/p>\n<\/p>\n
Credit to Author: Lily Hay Newman| Date: Fri, 17 Jun 2022 11:00:00 +0000<\/strong><\/p>\n Lily Hay Newman<\/a><\/span><\/span><\/p>\n To revist this article, visit My Profile, then View saved stories<\/a>.<\/p>\n To revist this article, visit My Profile, then View saved stories<\/a>.<\/p>\n There's a good<\/span> reason you're still afraid to answer your phone when an unknown number pops up.<\/p>\n For years, the telecommunications industry has been trying to curb robocalls, the frustrating and potentially dangerous spam calls that try to scam anyone who picks up the phone. But even after significant milestones in defense\u2014including the introduction of two telecom protocols<\/a> that cryptographically authenticate the source of calls\u2014you're probably still getting spammy calls that drive you nuts. In spite of the setbacks, though, researchers say they've seen real progress on reducing spam calls in the United States, and there's potential for even more improvement.\u00a0<\/p>\n At the RSA Conference in San Francisco last week, Josh Bercu of the trade association USTelecom and Gary Warner, director of intelligence at the security firm DarkTower, presented findings on progress squashing robocalls and the illegal call centers they emanate from, which are predominantly located in India. And they dug into the frustrating reality that the issue is far from solved.<\/p>\n \u201cI think it\u2019s not going well at all!\u201d Warner tells WIRED. \u201cAnd people understandably wonder why the carriers don\u2019t just block spam calls. But if you're AT&T or Verizon or T-Mobile or whoever, it\u2019s not in your purview to decide which conversations people are allowed to have. I don\u2019t think people want to be in that surveillance state where carriers are in a position of deciding what is an acceptable conversation for Americans to have.\u201d<\/p>\n That doesn't mean the carriers haven't stepped up their blocking when they see enough evidence that a call has a suspicious provenance. But USTelecom's Bercu notes that deciding how bold to be about blocking is a delicate issue that each phone company handles differently.<\/p>\n \u201cAs providers have gotten more aggressive blocking or labeling suspicious calls, they've taken on more risk that they'll mis-block or mislabel a legitimate call,\u201d he says. \u201cMaybe it really was a call from the bank or the pharmacy. There is some delicate balancing that providers have to do, and some are more aggressive than others.\u201d<\/p>\n Bercu adds, too, that different carriers work with different analytics services to identify suspicious call activity. This can create situations where, as trends in robocalling techniques evolve and spammers use different strategies to bounce calls around international networks, some analytics services may be better at catching certain behavior than others.<\/p>\n Bercu is also executive director of the Industry Traceback Group, a neutral entity under USTelecom designated by the Federal Communications Commission to promote intelligence-sharing to trace the source of illegal robocalls and promote collaboration between carriers. The idea is to look at how robocalls circumvent existing technical defenses, identify networks where these protections haven't been fully implemented, and work with providers to adopt stronger safeguards.<\/p>\n Ultimately, though, DarkTower's Warner says that as with other digital criminal industries like email spam, business email compromise<\/a>, and even ransomware<\/a>, the key to limiting robocalling is to make it more difficult for scammers to operate at every level of their business. This means making it harder for them to route their calls, but also harder to recruit call agents and purchase lead lists\u2014curated collections that claim to contain the phone numbers of targets like elderly people or people with medical issues.\u00a0<\/p>\n It also means targeting spammers' methods for laundering money. The financial sector has already done work in this area by putting flags on potentially suspicious gift cards, but scammers have found ways around this simply by requiring that victims send them a photo of their receipt for the gift card along with the card number itself. This way they can file claims that seem to show that they legitimately purchased and own the gift card. This takes time, though, and scammers have also developed laundering techniques in which they lean on money mule networks in the US or wherever they are operating and have mules open checking accounts where victims can wire money. They then quickly move the money out of the accounts using apps like Zelle, Venmo, or Cash App.<\/p>\n \u201cThe key is getting more people to understand the problem who can deny infrastructure to these actors, like communication platforms, financial institutions, telecoms, everyone together,\u201d Warner says. "Denying the ability for criminals to communicate and coordinate\u2014I think that is probably our most actionable path forward.\u201d<\/p>\n